GnuPG 2.2.36 released

Konstantin Ryabitsev konstantin at linuxfoundation.org
Mon Jul 11 14:50:24 CEST 2022


On Fri, Jul 08, 2022 at 11:07:36PM +0200, Ingo Klöcker wrote:
> > That key doesn't appear to be provided via
> > https://gnupg.org/signature_key.asc.
> 
> Yes, it is.
> 
> ```
> $ curl https://gnupg.org/signature_key.asc | gpg --import
> [...]
> gpg: key 549E695E905BA208: 1 signature not checked due to a missing key
> gpg: key 549E695E905BA208: public key "GnuPG.com (Release Signing Key 2021)" 
> imported
> gpg: Total number processed: 4
> gpg:               imported: 4
> 
> $ gpg -k 02F38DFF731FF97CB039A1DA549E695E905BA208
> pub   brainpoolP256r1/549E695E905BA208 2021-10-15 [SC] [expires: 2029-12-31]
>       02F38DFF731FF97CB039A1DA549E695E905BA208
> uid                 [ unknown] GnuPG.com (Release Signing Key 2021)
> ```
> 
> See https://dev.gnupg.org/T5949#159890 for why it doesn't work for you.

Ah, okay, that's unfortunate. I guess I'll skip this release, since I can't
verify it without building gnupg from scratch (without verifying it first).

-K



More information about the Gnupg-users mailing list